| 摘要: |
| 近年来,“探探”作为国内知名即时通信平台之一,常常被恶意用户用来实施诈骗、策反等各类不法活动。为有效发现和打击探探平台上的此类恶意用户,亟需针对探探恶意用户的定位技术。然而,当前国内外尚未见针对探探用户定位的相关报道,现有针对其他即时通信平台的定位方法由于没有考虑探探平台的特点(即,通告距离的特性),难以高效发现用户和实施高精度定位。为此,本文提出了一种针对探探的基于通告距离跃变分析的恶意用户定位方法。本文结合探探平台通告距离的数据特点,分析了通告距离与实际距离关系,建立了探探平台通告距离模型;为了有效逼近恶意用户,结合分段式通告距离模型特点,本文设计了恶意用户潜在区域发现算法;为了提升定位精度,本文结合探探的通告距离跃变特点,设计了一种基于距离跃变的定位算法,通过探针移动策略以更好地获得跃变距离,并结合三边测量方法得到目标的理论位置。在实际网络环境下开展了一系列实验,结果表明:本文所提方法平均定位误差为20.92 m,且95%的定位误差小于50 m,相比于现有基于空间分割、加权最小二乘、启发式数论等针对微信、陌陌等的典型定位方法,定位误差降低34.99%～60.60%。 |
| 关键词: 即时通信 探探 恶意用户定位 通告距离模型 距离跃变 |
| DOI：10.19363/J.cnki.cn10-1380/tn.2024.11.09 |
| 投稿时间：2022-12-04修订日期：2023-02-24 |
| 基金项目:本课题得到国家自然科学基金(No.62002386,No.U1804263,No.62172435);中原科技创新领军人才项目(No.214200510019);河南省重点研发专项(No.221111321200)资助。 |
|
| A Malicious User Geolocation Method on Tantan App with Distance Transition |
| GUO Jiashan,DU Shaoyong,SHI Wenqi,LIU Ruiting,LUO Xiangyang |
| School of Cyber Science and Engineering, Zhengzhou University, Zhengzhou 450001, China;Key Laboratory of Cyberspace Situation Awareness of Henan Province, Zhengzhou 450001, China;Key Laboratory of Cyberspace Situation Awareness of Henan Province, Zhengzhou 450001, China;State Key Laboratory of Information Security, Institute of Information Engineering, Chinese Academy of Sciences, Beijing 100093, China |
| Abstract: |
| In recent years, as one of the well-known instant messaging platforms in China, Tantan is often used by malicious users to carry out various illegal activities such as fraud and countermeasures. To effectively discover and combat such malicious users on the Tantan platform, it is urgent to target the positioning technology of Tantan malicious users. However, at present, there are no relevant reports at home and abroad on Tantan user positioning. The existing positioning methods for other instant messaging platforms do not consider the characteristics of Tantan platform (i.e., the characteristics of report distance), which makes it difficult to efficiently find users and implement high-precision positioning. Therefore, this paper proposes a malicious user geolocation method on Tantan app with distance transition. Based on the data characteristics of report distance of the Tantan, the relationship between the report distance and actual distance is analyzed, and the report distance model of the Tantan is established. Aiming at the characteristics of segmented report distance model and approaching malicious users, this paper designs a potential area discovery algorithm for malicious users. To improve the positioning accuracy, this paper designs a geolocation algorithm based on distance transition by combining the characteristics of probe to announce distance transition, and the probe movement strategy is used to better obtain the transition distance, and the theoretical position of the target is obtained by combining the trilateration method. A series of experiments are carried out in the actual network environment, and the results show that the average positioning error of the proposed method is 20.92 m, and 95% of the positioning error is less than 50 m, which is reduced by 34.99%～60.60% compared with the existing typical positioning methods for WeChat and Momo based on space partition, weighted least squares, and heuristic number theory. |
| Key words: instant messaging Tantan malicious user geolocation model of report distance distance transition |
